TODO: get complete user from DB